Marketing Data Ethics: Where We Draw the Line as an Agency

A Conversation the Industry Doesn't Have Enough

Marketing technology gives agencies enormous power over user data. We can track which pages someone visits, what they search for, how they interact with content, and connect that behavior to their email address, phone number, and purchase history. The technical capability to collect this data far outstrips the industry's norms around when it's appropriate to do so.

This post explains where we draw the line -- not because a regulator forced us to, but because we've thought carefully about what ethical data practice looks like and built our agency around those principles.

What We Won't Implement, Even If You Ask

Over the years, clients have asked us to do things we've declined. Being transparent about this is important, because it tells you something about how we'll handle your project.

Tracking without consent on EU/UK traffic: We will not implement tracking setups that collect personal data from European users without a compliant consent mechanism. Not because GDPR fines are scary (though they are), but because users have a genuine right to know what data is being collected about them and to say no.

Cross-site tracking via workarounds: There are technical methods to circumvent browser privacy protections -- first-party cookie manipulation schemes designed to simulate third-party cookies, browser fingerprinting, and similar techniques. We don't implement these. When browser manufacturers and regulators move to restrict tracking, they're responding to legitimate user expectations of privacy.

Hidden pixels or tags not disclosed in privacy policies: Every tracking implementation we deliver is documented. Every third-party vendor that receives user data needs to be disclosed in your privacy policy. If a client asks us to add a tag quietly without updating their privacy documentation, we push back.

Collecting sensitive data categories unnecessarily: Health information, financial status, political views, and similar sensitive categories require explicit consent and careful handling. We don't help clients target advertising based on these categories through workarounds.

What Good Data Ethics Looks Like in Practice

Data ethics isn't just about what you refuse to do -- it's about the positive practices that build trust with users and protect your business long-term.

Data minimization: We consistently advise clients to collect less data, not more. The instinct in marketing is to track everything just in case. In practice, 90% of the value comes from a small number of well-configured events. Collecting unnecessary data creates liability, complicates compliance, and makes your analytics harder to interpret.

Retention limits: Data that's no longer useful shouldn't be kept indefinitely. We help clients set up appropriate data retention periods in GA4 and advise on how long CRM data should be kept before purging inactive contacts.

Transparency with your users: We recommend that clients write privacy policies in plain language, not legal boilerplate. Users who understand what you're collecting and why are more likely to consent -- and less likely to feel violated when they find out.

Purpose limitation: Data collected for analytics shouldn't be repurposed for things users didn't expect. The email someone provides for a newsletter isn't implicit permission for that email to be matched against data brokers and used for ad targeting.

Why This Matters for Your Business

There's a pragmatic argument here, not just a moral one. Businesses that build tracking infrastructure on shaky ethical foundations face compounding risks: regulatory action, platform bans, user backlash, and reputational damage. We've seen companies lose significant advertising capabilities because Meta or Google detected policy violations in their tracking implementation.

Beyond risk, there's a performance argument. Consent Mode v2, when implemented correctly, allows Google to model conversions from consenting users and apply those patterns to non-consenting users -- giving you better attribution without compromising privacy. First-party data collected with genuine consent performs better in ad targeting than third-party data collected through dark patterns.

Ethical tracking isn't at odds with marketing performance. Done right, it's the foundation of it.

How We Apply These Principles in Projects

In practice, our ethics principles shape every engagement in specific ways. When we audit an existing tracking setup, we flag compliance issues alongside technical bugs -- with the same urgency. When we scope new implementations, we ask about your user base's geography, the sensitivity of the data you're collecting, and your current consent infrastructure.

We also push back on timelines that sacrifice correctness. We'd rather take an extra week to implement consent properly than rush to production with a setup that creates legal exposure for our client.

These aren't positions we hold lightly or abandon when they're inconvenient. They're the standard we'd want applied if we were the user on the other end of the tracking pixel.